-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Apr 2025 22:49:23 +0200 Source: graphicsmagick Binary: graphicsmagick graphicsmagick-dbg libgraphics-magick-perl libgraphicsmagick++-q16-12 libgraphicsmagick++1-dev libgraphicsmagick-q16-3 libgraphicsmagick1-dev Architecture: ppc64el Version: 1.4+really1.3.40-4+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Salvatore Bonaccorso Description: graphicsmagick - collection of image processing tools graphicsmagick-dbg - format-independent image processing - debugging symbols libgraphics-magick-perl - format-independent image processing - perl interface libgraphicsmagick++-q16-12 - format-independent image processing - C++ shared library libgraphicsmagick++1-dev - format-independent image processing - C++ development files libgraphicsmagick-q16-3 - format-independent image processing - C shared library libgraphicsmagick1-dev - format-independent image processing - C development files Closes: 1099955 Changes: graphicsmagick (1.4+really1.3.40-4+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. . [ Carlos Henrique Lima Melara ] * d/p/CVE-2025-27795.patch: fix CVE-2025-27795 by adding image dimension resource limits. (Closes: #1099955) . [ Salvatore Bonaccorso ] * ReadJXLImage(): pixel_format.num_channels needs to be 2 for grayscale matte (CVE-2025-32460) Checksums-Sha1: 6d8aee13070e309ac242cbc064116190f5c33fcd 4246164 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_ppc64el.deb f2c6e8f6f47870dc0a349df05442cccfa87f0a96 11333 graphicsmagick_1.4+really1.3.40-4+deb12u1_ppc64el-buildd.buildinfo 00eb3acc52c6aa204a3d5685db6d2bc9a91b5a1d 1019780 graphicsmagick_1.4+really1.3.40-4+deb12u1_ppc64el.deb 7b65360007cd996270277575abb7f30db945692f 62540 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_ppc64el.deb c2da435286bcd95807268228d24377ba2fc9cd4a 118472 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_ppc64el.deb be485df677bda9fe4e7d8eee11670fd09980f95f 310036 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_ppc64el.deb ca7f4611b27321e11a4363188fb2bcac84e41a44 1180028 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_ppc64el.deb f4fe77834e575c608ff8bfbb293ccbbaabb2301b 1507368 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_ppc64el.deb Checksums-Sha256: 8d8296b08311b9c649f61fed3e69f1685e6579c487cdcf3e3210bd50c6062acb 4246164 graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_ppc64el.deb 8608bbe2844b455b3880e7672e832df9daa572ba2ffa4e1527aca115961eb327 11333 graphicsmagick_1.4+really1.3.40-4+deb12u1_ppc64el-buildd.buildinfo 40517326b8694e207235ab15f1daa20eaaba89d290107d864974b6f9ff14ea34 1019780 graphicsmagick_1.4+really1.3.40-4+deb12u1_ppc64el.deb 15eae85fa09b84b1991f18f7264968fe2fb22599db30484f978f18e395e7a661 62540 libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_ppc64el.deb 5d330081d3267790f5ff319a61b3bfbc06351b04072fd3a220afdf0cd6b22a9d 118472 libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_ppc64el.deb 5a5a8c68fea1a6e0324fa7548f11b8d3bf30383776252827aa06d1563cd79328 310036 libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_ppc64el.deb 8ea22939e5c52c0ca40a74dcf4df910831ee5beedd91d318eef7692c8fdbe60f 1180028 libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_ppc64el.deb b44bd99953b3717fca7d2b3526ca691706100efb9bdd745903528ba162b983ae 1507368 libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_ppc64el.deb Files: 45b189ee1fea6c5fe3be2c34633ae19f 4246164 debug optional graphicsmagick-dbg_1.4+really1.3.40-4+deb12u1_ppc64el.deb 518cbd2879c926140b50608243fb7d20 11333 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_ppc64el-buildd.buildinfo 28ddb8db8daf3ad243d2f630954bf940 1019780 graphics optional graphicsmagick_1.4+really1.3.40-4+deb12u1_ppc64el.deb be91fa182f1a6fc4452c3177ffe15517 62540 perl optional libgraphics-magick-perl_1.4+really1.3.40-4+deb12u1_ppc64el.deb 58c204696fcaa2656879ea549fe08738 118472 libs optional libgraphicsmagick++-q16-12_1.4+really1.3.40-4+deb12u1_ppc64el.deb bded6c40e928435f0fca44e8a4b8ad15 310036 libdevel optional libgraphicsmagick++1-dev_1.4+really1.3.40-4+deb12u1_ppc64el.deb 707921ecf692c0fd1410fd14c5ddce9d 1180028 libs optional libgraphicsmagick-q16-3_1.4+really1.3.40-4+deb12u1_ppc64el.deb e8d61d726e61ac01e0067008606a1d24 1507368 libdevel optional libgraphicsmagick1-dev_1.4+really1.3.40-4+deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0YcVZfZCWQv84jpRNcqbeolus3sFAmf5iLYACgkQNcqbeolu s3tYvQ//SuJYkcEmaXgY4he4GTtGIW+A0o4S6XQBNaC8Isj0cc99Z81FZN+1RPqz sWnnhTTkz8F7KHPsNxQbsMKehBSuwWMlpCMWiZUCeG82Pmp4Selwje3MGa3uu2J/ KaCzeac4M8KVBkhLyn0s1h8HPb1e/oWoR0FsFDmUTH0O8xQj1JDYDACJxutok0l8 debyxgYXD1VtJp8a0Sy0zL09/aQfJ/F6HxbiatWYUXJ3C96OO8PRRjLEBEJR4z+g mHA4tNxQT8eLsq8yas+6LPpqNL5r3dqDCVJraLVxroJXI3uZnQ1A1gVblPwP6W8Y N4zTAVGie0chQXyPt1C8q4sk6cZLqZu8iErKAPzkKIp8/ih6RvVnrmv5s/gKgKC5 luN2rDZfXm+1ovQu5jdM1pxnU66rr113jsxlJMOXaLIurq+YwrNHmO93jArD0mSU Xoq8OVT7WVyrK8hJ7aPKO7eGIfS+VeY3m8uJE2HAPSwbErgAxH8edsVchA4GgCMS tbZ82r54LgSprE0OHMiqwVyt5JEHUe+0ECLY64OZqItY7o2Ho6fmcSJLZqLOoO0t qHAHGeSBYjLGVeogSAgweMLkcvFnQAY5XD/ehFXXhOfK441vVm/M3YWnnvtWhyiu grJkOHmRRHx3xy0V0+YqVVNguXuIxsXbZ2kp0xBLdviaQjwbKcY= =b80K -----END PGP SIGNATURE-----